Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Bright Cherry Pty Limited ACN 620 801 934 trading as Traffic Ninjas collects, uses, stores, discloses, and deletes information in connection with RevenueGPS.

RevenueGPS is an invite-only ecommerce audit and recommendation tool for Traffic Ninjas clients and approved users.

RevenueGPS may be used by Shopify stores, WooCommerce stores, and other ecommerce businesses. Shopify stores may connect through Shopify OAuth or another authorised Shopify connection method. Non-Shopify stores may use RevenueGPS by entering information manually, uploading screenshots or files, and allowing analysis of public store pages.

This policy complies with Australia's Privacy Act 1988 and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Information we collect

Account and contact information

This may include:

  • name;
  • email address;
  • business name;
  • store platform;
  • store URL;
  • website URL;
  • Traffic Ninjas client or account manager information;
  • support messages, feedback, and communications with us.

Business and audit inputs

When you use RevenueGPS, you may provide information about your business, products, offers, customers, goals, traffic sources, sales, conversion issues, marketing activity, store performance, and ecommerce challenges.

This may include manually entered numbers, written answers, uploaded screenshots, uploaded files, analytics summaries, order summaries, sales summaries, conversion data, product information, marketing data, SEO information, and other store performance information.

We use this information to generate your audit and recommendations.

Shopify store data

If you connect your Shopify store, RevenueGPS may collect and process data made available through the Shopify permissions you approve.

Depending on the app version and permissions granted, this may include:

  • store name, domain, currency, country, and general store settings;
  • product and collection information;
  • theme, page, blog, menu, and content information;
  • sales, order, revenue, and performance-related information;
  • traffic, analytics, conversion, and marketing-related information;
  • discount, inventory, fulfilment, and operational information where needed for the audit;
  • metadata relating to the Shopify connection.

We aim to request only the Shopify data reasonably needed to provide RevenueGPS.

Non-Shopify store information

If you use WooCommerce or another non-Shopify ecommerce platform, we may collect information you manually provide, upload, or authorise us to analyse. This may include:

  • store URL and public store pages;
  • product, collection, category, and content information;
  • screenshots of dashboards, analytics reports, sales reports, order summaries, product pages, checkout pages, conversion reports, traffic reports, or marketing reports;
  • files or exports you upload;
  • manually entered sales, traffic, conversion, customer, product, and marketing information;
  • other ecommerce performance information you choose to provide.

We do not connect to WooCommerce, WordPress, or other non-Shopify backends unless we clearly tell you and you authorise that connection.

Uploaded screenshots and files

If you upload screenshots or files, we may process them to extract relevant text, numbers, tables, images, page content, and ecommerce performance information.

You should avoid uploading screenshots or files that contain passwords, payment card details, private access tokens, unnecessary customer records, health information, government ID documents, or other sensitive information.

If uploaded screenshots or files contain personal information, we will handle that information under this Privacy Policy.

2. How we use information

We use information to:

  • provide RevenueGPS;
  • connect to authorised Shopify stores where applicable;
  • analyse manually entered ecommerce data;
  • extract relevant information from screenshots or uploaded files;
  • scan and analyse public store pages;
  • generate audit reports, scores, priorities, summaries, and recommendations;
  • personalise recommendations;
  • provide support;
  • troubleshoot bugs and errors;
  • maintain and improve RevenueGPS;
  • monitor usage, reliability, and security;
  • detect fraud, misuse, unauthorised access, or security issues;
  • communicate with you about RevenueGPS or related Traffic Ninjas services;
  • comply with legal, regulatory, accounting, tax, security, and platform obligations.

3. AI processing

RevenueGPS uses AI assistance to help analyse store data, public store pages, screenshots, uploaded files, manual inputs, and ecommerce context.

We may send relevant audit inputs, Shopify data where applicable, public store page content, screenshot content, uploaded file content, and business context to AI service providers to generate your audit and recommendations.

We do not use Shopify store data, Shopify merchant data, Shopify customer data, non-Shopify store data, uploaded screenshots, uploaded files, or audit data to train, fine-tune, or improve AI models unless you separately give us permission or we are otherwise legally and contractually allowed to do so.

We do not permit our AI service providers to use your store data for their own independent purposes where we can contractually restrict that use.

AI outputs may be inaccurate, incomplete, outdated, or unsuitable. You should review all outputs before using them.

4. How we store it

Audit data is stored securely on Supabase, a cloud database provider. Data is encrypted at rest (AES-256) and in transit (TLS). Your audit reports are retained for as long as you hold an active account with Traffic Ninjas.

You may request deletion of your audit data at any time by contacting Traffic Ninjas via thetrafficninjas.com/contact.

5. Third-party services

To deliver the audit, RevenueGPS uses the following services. We share only the minimum data necessary for each to perform its function.

  • Shopify — store data access via OAuth (Shopify stores only)
  • Supabase — secure data storage (EU / US regions)
  • Vercel — application hosting (US)
  • Firecrawl — public page scanning
  • OpenRouter / Anthropic / OpenAI — AI-powered audit analysis
  • Resend — transactional email (audit completion notifications)

Each provider maintains their own data protection standards. We do not sell your data to any third party.

6. Customer data

RevenueGPS is designed to audit and recommend improvements for ecommerce merchants. It is not designed to store individual customer records.

Depending on the store platform, data provided, screenshots uploaded, and features used, RevenueGPS may process limited customer-related or order-related information where needed to calculate store performance, sales patterns, conversion issues, or other ecommerce recommendations.

Where possible, we use aggregated, summary, or performance-level data rather than individual customer records.

You should avoid uploading unnecessary customer records, payment information, private messages, or sensitive customer information.

You are responsible for ensuring that your own store privacy policy explains how you use apps, consultants, and service providers that process customer information.

7. Shopify merchant data requests

RevenueGPS responds to Shopify's mandatory GDPR data request webhooks. RevenueGPS stores only aggregated, store-level analytics — we do not store individual customer records (names, emails, addresses, or payment details). Customer data request and erasure webhooks are acknowledged within Shopify's required timeframe.

If you disconnect your Shopify store, we cease accessing your store data immediately. Your OAuth token is deleted automatically 48 days after uninstall in accordance with Shopify's data retention policy.

8. Your rights

You may at any time request access to, correction of, or deletion of your data by contacting Traffic Ninjas via thetrafficninjas.com/contact. EU residents hold additional rights under GDPR, including data portability and the right to object to processing.

9. Contact

Bright Cherry Pty Limited, trading as Traffic Ninjas
thetrafficninjas.com/contact